Title | Extracting forensically relevant information from windows application |
---|
Authors | Olajide, F., Savage, N., Akmayeva, G. and Shoniregun, C. |
---|
Type | Conference paper |
---|
Abstract | In this paper, we present the method of investigating and extracting forensically relevant information from the physical memory of Windows systems. This approach revealed the extracted evidence dispersed in the physical memory of an application. The result shows a coherent view of user input on applications with over 96% of user input stored on Word and 94% in PowerPoint. The mean value of the user input found, the user input repeated in the memory and the user input found in continuous blocks will be presented. |
---|
Year | 2012 |
---|
Conference | 2011 International Conference on Information Society |
---|
Publisher | IEEE |
---|
Publication dates |
---|
Published | 27 Aug 2012 |
---|
Journal | International Conference on Information Society (i-Society 2012) |
---|
Web address (URL) of conference proceedings | https://ieeexplore.ieee.org/xpl/conhome/6266839/proceeding |
---|